WordPress Ultimate Instagram Feed plugin <=1.3.1 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by Gilzow in WordPress Ultimate Instagram Feed plugin versions =1.3.1. Solution We were unable to find a complete changelog for this plugin, but there is 1.3.3 version available. Use it at your own risk!...

iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service Exploit

Exploit for iOS platform in category dos / poc Exploit Title: TpwnT - iOS Denail of Service POC Date: 10-31-2017 Exploit Author: Russian Otter Ro Vendor Homepage: https://support.apple.com/en-us/HT208222 Version: 2.1 Tested on: iOS 10.3.2 - 11.1 CVE: CVE-2017-13849 """ -------------------------...

iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service

Exploit Title: TpwnT - iOS Denail of Service POC Date: 10-31-2017 Exploit Author: Russian Otter Ro Vendor Homepage: https://support.apple.com/en-us/HT208222 Version: 2.1 Tested on: iOS 10.3.2 - 11.1 CVE: CVE-2017-13849 """ ------------------------- CVE-2017-13849 TpwnT by Ro of SavSec...

WordPress Ultimate Instagram Feed Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Ultimate Instagram Feed plugin is a photo wall plugin used in... A cross-site scripting vulnerability exists i...

Ultimate Instagram Feed <= 1.3.1 - Authenticated Cross-Site Scripting (XSS)

In regards to https://wpvulndb.com/vulnerabilities/8947, the XSS vulnerability remains in 1.3 and 1.3.1 as the author passes GET'accesstoken' to sanitizetextfield. However, the value is inserted into an attribute of an element, and sanitizetextfield does not filter for quotes single or double...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "accesstoken" parameter...

CVE-2017-16758

Cross-site scripting XSS vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "accesstoken" parameter...

CVE-2017-16758

Cross-site scripting XSS vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "accesstoken" parameter...

CVE-2017-16758

CVE-2017-16758 affects WordPress via the Ultimate Instagram Feed plugin up to version 1.3, in the admin/partials/uif-access-token-display.php file. The vulnerability is an XSS in which the attacker can inject script/HTML through the access_token parameter, with evidence of a PoC demonstrating ref...

CVE-2017-16758

Cross-site scripting XSS vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "accesstoken" parameter...

WordPress Ultimate Instagram Feed 1.2 Cross Site Scripting Vulnerability

WordPress Ultimate Instagram Feed plugin version 1.2 suffers from a cross site scripting vulnerability. ------------------------------------------ Ultimate Instagram Feed - WordPress plugin Version: 1.2 Author: OmarK ------------------------------------------ The vulnerability lies in the...

Facebook and Instagram Suffer Worldwide Outage

By Carolina Social media giants Facebook and Instagram suffered a brief service outage in This is a post from HackRead.com Read the original post: Facebook and Instagram Suffer Worldwide Outage...

WordPress Ultimate Instagram Feed 1.2 Cross Site Scripting

------------------------------------------ Ultimate Instagram Feed - WordPress plugin Version: 1.2 Author: OmarK ------------------------------------------ The vulnerability lies in the "accesstoken" parameter and can cause reflected XSS vulnerability. The issue is on the file...

Ultimate Instagram Feed <= 1.3 - Authenticated Cross-Site Scripting (XSS)

Author: OmarK The vulnerability lies in the "accesstoken" parameter and can cause reflected XSS vulnerability. The issue is on the file ultimate-instagram-feed/admin/partials/uif-access-token-display.php line 19: the vulnerable code is the following: echo $GET'accesstoken'; There is an echo of th...

zaptourviagens.com.br XSS vulnerability

Vulnerable URL: http://www.zaptourviagens.com.br/modules/modjoinstagrambox/tmpl/instagrambox.php?username=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=〈=pt-BR=false=true=100%=350pxℑ=medium=285989=F8F8F8=FFFFFF==260796206.0efbe26.89a76a9668934089a2d00d928486fd26 Details: Description| Value...

divinocha.com XSS vulnerability

Open Bug Bounty ID: OBB-359690 Description| Value ---|--- Affected Website:| divinocha.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bordadamata.mg.gov.br XSS vulnerability

Vulnerable URL: http://www.bordadamata.mg.gov.br/modules/modjoinstagrambox/tmpl/instagrambox.php?username=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E=〈=pt-BR=true=true=100%=375pxℑ=medium=00563C=F8F8F8=FFFFFF==260796206.0efbe26.89a76a9668934089a2d00d928486fd26 Details: Description| Value ---|-...

Labs report: summer ushers in unprecedented season of breaches

In this edition of the Malwarebytes Cybercrime Tactics and Techniques report for the third quarter of 2017, we saw a number of high profile breaches targeting the personal information of hundreds of millions of people. While the Equifax breach may have dominated the news cycle, notable attacks...

l.instagram.com XSS vulnerability

Open Bug Bounty ID: OBB-323272 Description| Value ---|--- Affected Website:| l.instagram.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

l.instagram.com Open Redirect vulnerability

Vulnerable URL: http://l.instagram.com/?e=ATN5z269QUrerKM8xE-rBBS08M3oDC1e694fsY39ek5NSX6e5pGF3vaJSsNmyQ=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:|...